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GAIN-SCHEDULED FAULT TOLERANCE CONTROL UNDER 

FALSE IDENTIFICATION* 


Jong-Yeob Shin t 


ABSTRACT 

An active fault tolerant control (FTC) law is generally sensitive to false identification 
since the control gain is reconfigured for fault occurrence. In the conventional FTC law 
design procedure, dynamic variations due to false identification are not considered. In 
this paper, an FTC synthesis method is developed in order to consider possible varia- 
tions of closed-loop dynamics caused by false identification. An active FTC synthesis 
problem is formulated into a linear matrix inequality (LMI) optimization problem to 
minimize the upper bound of the induced-/^ norm which can represent the worst-case 
performance degradation due to false identification. The developed synthesis method 
is applied to control of the longitudinal motion of FASER (Free-flying Airplane for 
Subscale Experimental Research). The designed FTC law of the airplane is simulated 
for pitch angle command tracking under a false identification case. 


1 INTRODUCTION 

In the past few decades, there has been interest in a fault tolerant control (FTC) sys- 
tem which has the ability to detect actuator /sensor faults automatically and to prevent 
faults from developing into a total system failure. Especially in constructing a flight control 
system, an active FTC system has been researched for achieving single aircraft accident 
prevention [2, 3, 7, 16]. An active FTC system consists of an FTC law, a fault detection 
and isolation (FDI) module and a supervisory system. An FTC law should react to actua- 
tor/sensor faults through reconfiguration and an FDI module should detect actuator/sensor 
fault occurrences. Based on the information provided by an FDI module, a supervisory 
system decides which actuator/sensor is faulty and sends a signal to an FTC law for its 
reconfiguration. 

In general, an active FTC law is designed, based on an open-loop system modeled as a 
function of fault parameters under the assumption that they are immediately identified by an 
FDI module. Recently, using linear matrix inequality (LMI) optimization solutions [3, 7, 16], 
an active FTC law has been synthesized in the form of a linear parameter varying (LPV) 
system whose dynamics vary as scheduling parameters change. Open-loop dynamics are 
modeled as an LPV system in which some of the scheduling parameters are fault param- 
eters that represent fault occurrences at actuators/sensors. The designed LPV-FTC law 
can robustly stabilize the closed-loop system and achieve desired performance during a fault 
occurrence under the assumption that fault parameters are measured in real-time. 

*This work was supported by the National Aeronautics and Space Administration under NASA Cooper- 
ative Agreement NCC1-02043. 

' National Institute of Aerospace (N.I.A.), Hampton, VA 23666. Email: shin j ySnianet . org 


1 



Typically, there is always some level of time-delay to detect faults regardless of FDI al- 
gorithms such as an extended Kalman FDI filter [16] or an LPV-FDf filter [17]. During a 
time-delay interval, an open-loop system is in a faulty condition but the information provided 
by an FDI module implies that the system is not in a faulty condition. It is also possible 
that an FDI module and a supervisory system can produce false identification on healthy 
actuator/sensors, which may lead the system to be locally unstable temporarily. 

The objectives of FTC synthesis are for the closed-loop system to be stable and to be able 
to achieve the desired performance level for fault occurrences and to reduce performance 
degradation due to false identification. One approach to achieve the objectives is designing a 
passive FTC law which has constant gains for both healthy and faulty systems. In that case, 
obviously the closed-loop system can be stable for a false identification case since the control 
gains are not changed due to false identification. The designed passive FTC law may be, 
however, conservative in performance since the controller is constructed from the common 
solutions of the LMI optimization problem [3] for both healthy and faulty systems. 

Another approach is designing an active FTC law whose gains are reconfigured when a 
fault occurs. One of the synthesis methods to design an active FTC law is a conventional 
LPV synthesis method[18] in which it is assumed that scheduling parameters of an LPV 
system are exactly measured in real-time. In the conventional LPV synthesis method, false 
identification can not be considered. It is needed to modify the LPV synthesis method in 
order to consider possible closed-loop dynamic variations caused by false identification. 

In this paper, an LPV control synthesis method is developed to design an active FTC law 
in order to consider the dynamic variations of an FTC system due to false identification, 
based on the brief unstable LPV system analysis method[13, 8] and the conventional LPV 
synthesis method[18]. In Ref. [8], the performance of an LPV system with brief instability 
was analyzed in terms of the upper bound of the C 2 norm as a function of duration time and 
exponential decay rate over parameter subspaces. In Ref. [13], the LPV analysis method[8] is 
applied to analyze an FTC system under false identification. In Ref. [13], during a short time 
interval of false identification, the closed-loop system can be locally unstable. The unstable 
rate was calculated and then used to calculate the upper bound of the C 2 performance level 
over all parameter spaces. In this paper, an LPV control synthesis method under possible 
false identification is developed and applied for designing an active FTC laws of the longi- 
tudinal motion of FASER. 

This paper is organized as follows. In Section 2, the analysis problem including false iden- 
tification case is described and in Section 3 a gain-scheduled FTC synthesis methodology is 
presented. In Section 4, the longitudinal motion of FASER is described in terms of control 
sensitivities of each control surfaces and the details in designing FTC law are presented. 
Section 5 concludes with a brief summary. 

2 LINEAR PARAMETER VARYING ANALYSIS METHOD 

An FTC system consists of an FTC law, an FDI module and a supervisory system (logic). 
When a fault occurs, the FDI module and supervisory system detect it and generate signals 
for evaluating/reconhguring the FTC law. The FDI model requires some time to detect a 
fault. Hereafter, the required time is called detection time for the FDI module. During 
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detection time, open-loop dynamics are in a faulty condition but the designed control law 
is not yet reconfigured for it. Suppose there are redundant control actuators to prevent a 
system having zero controllability for fault occurrence. The FDI module can also identify a 
healthy actuator as a faulty one for a short time interval when a fault occurs on another. It 
is called false identification. In Refs. [13, 8, 15], an analysis framework of the FTC system 
is developed for false identification and detection time-delay cases. In this section, the LPV 
analysis method including false identification is summarized. 

Consider an open-loop system as an LPV system: 


X 


^{Ppi Pf) B\ {p p ,Pf) B 2 (p p ,p f ) 


X 

e 

= 

Cl (p P ,Pf) D n (p p ,pf) D V2 (p p ,Pf) 


d 

y. 


C2(p P ,Pf) D 21 (p p ,p f ) 0 
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where p p G TZ np are physical parameters measurable by sensors in real-time such as velocity 
and angle of attack in flight dynamics and Pf E 1Z nf are fault parameters estimated by the 
FDI module that can indicate open-loop dynamic variations due to fault occurrence. The 
vectors x E 7 Z Hx , e E lZ ne , y G 7t ny , d G lZ nd , and u G TZ nu are states, errors, measurements, 
disturbances and input signals, respectively. Note that the matrices are functions of physical 
parameters and fault parameters. 


A control law is defined as 
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where the vector Xk is a control state vector and pj are estimated fault parameters. Note 
that the control gain is a function of physical parameters and estimated fault parameters. 


Using Eqs.(l) and (2), the closed-loop system is 
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where x ^ = [x T x^\ G 7 Z n and 
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where the parameter matrices are 
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Hereafter, parameters (p p , pf, pf ) are denoted by p. Note that when an FDI module identifies 
faults immediately, the estimated fault parameters pf are equal to pf. For analyzing the 
closed-loop system for false identification, pf and pf are treated as independent parameters 
to capture the closed-loop dynamic variations clue to false identification. 

The trajectories of parameters p{t) stay in the compact set called the entire parameter 
space such that 


T '■= (p(f) ! Pp(t) e Fp, pf{t ) e T P} , Pf(t) e T- Pf ) ( 7 ) 

where tF p , T (>r and J- pf are bounded compact sets in lZ np , lZ nf , and lZ nf , respectively. Note 
that T p is called flight envelope when p p are velocity and angle of attack for longitudinal 
motion of an airplane. 

The entire parameter set is divided into two subspaces V\ and V 2 such that 

P : = P ‘ UT *»- (8) 
0 = V\ n TV 

The subspaces are defined based on the closed-loop dynamic changes clue to false identifi- 
cation. Here, when all parameters stay in TV the FDI module estimates fault parameters 
accurately to within a small error bound, S p . Thus, the subspace V\ can be defined as: 

Ti '■= {Pf(t)\ Pf(t) £ S(pf,S p ),pf(t) e Fp f , p p e Tp\ (9) 

where 

S{pf,8 p ) ■■= {p f (t) | \\p f {t) - p f {t)\\ < 5 P , 0 < S p } . (10) 

For false identification, pf(t) is not in the set S(pf,5 p ) since pf(t) indicates a healthy con- 
dition but pf{t) indicates a faulty condition. Parameter subspace V 2 is defined for the false 
identification. Assume that the closed-loop system is locally unstable along the trajectories 
over the parameter subspace TV 

To represent dynamic variations of the closed-system in Eq. (3) over each parameter sub- 
space, a duration time over each subspace is defined as follows [8]: 

Definition 1 Duration time T Pi over each parameter subspace : 


T Pi (t 0 , t) — T 0 . + / ai(p(s))ds, Vt > t a > 0, 

Jto 

( 11 ) 

<Ti{p{s)) = ( 0 ’ P(S) ^ Vh 

(12) 

{ 1 , P (s)eV l , i e [l 2], 


A duration time is bounded as 


T 0i < T p . < T 0 . +ai(t- t 0 ) 

(13) 
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where 0 < cp < 1 and 0 < T 0i . The constant cy represents a ratio of the duration time in 
the i-th subspace to the total time and T 0 . is the duration time for a system to stay in the 
i-th subspace during the interval [0, t Q \. Note that Yli=\ a i — 1 and Y2i= i T 0i = t Q - 


For the closed-loop system of Eq. (3), an induced-£ 2 norm is defined as: 


sup 

P ev,deC2,\\d\\2^o 



(14) 


The performance level of the closed-loop system with false identification is calculated in 
terms of the induced-/^ norm as follows: 

Theorem 1: Consider the closed-loop system in Eq.(3). Suppose there exists a positive 
definite matrix P(p) G 'R n * xnx such that 
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(17) 


where X\ and k are positive scalar constants. The induced-C 2 norm from d to e of the 
closed-loop system with given T Q2 is no larger than M 7 where 

g(Ai +k)T 02 

A ’ 

A = Ai — (Ai + n)a 2 . 

Under the condition a 2 < a t : = the constant A is positive. 

Proof: See Ref. [15]. 

The constant M 7 represents the upper bound of the worst-case performance level due to 
false identification. Thus, a synthesis problem for a controller K, as defined in Eq.(2), can 
be formulated into an optimization problem: 



(18) 

(19) 


min M y , s.t. Eqs.(15)-(17). (20) 

K,y>0,P>0 ' v v v ' 

with pre-dehned Ai and k values. The optimization problem of Eq.(20) is converted into an 
LMI optimization problem in the next section. 
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3 GAIN-SCHEDULED FTC SYNTHESIS METHODOLOGY 


The projection lemma in Ref. [5] plays a key role in converting the analysis problem of 
Eqs.(15)-(17) into a control synthesis problem. Here, for completeness, the lemma [5] is 
described as follows: 

Lemma 1: Given a symmetric matrix T G 7 Z nxn and two matrices Q and R of column 
dimension n, consider the problem of finding some matrix 0 of compatible dimensions such 
that 

T + R t O t Q + Q t QR < 0 (21) 

Suppose the matrices J\[r and Nq are the null space of R and Q, respectively. Then Eq.(21) 
is solvable for 0 if and only if 

JVr^JVr < 0, and A/^TA/jg < 0 (22) 


Proof. See Ref. [5]. 

To synthesize a gain-scheduled FTC law under false identification, Ai and n values are 
defined by a control designer. The solvability condition of synthesizing a gain-scheduled 
control under false identification is described as follows: 


Theorem 2 Given the open-loop system in Eq.(l), the entire parameter spaces are par- 
titioned (see Eq.(8)). Suppose there exist positive matrices X(p) and Y(p) that satisfy the 
following conditions 
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>0 ,p£V, 


(27) 



with given constants Ai and k, where 


N x = Null([B%(p) D T l2 (p ) 0]) (28) 

N y = Null([C 2 (p ) D 21 (p) 0]). (29) 

Then the induced- C 2 norm of d to e of the closed-loop system of Eq. (3) is bounded by M 7 of 
Eq.(18). 


Proof. : Define matrices as follows: 

R = [C(p) An(p) 0] 

Q = [B T (p)P(p) 0 DUp)\ 

'A T (p)p(p) + p(p)A(p) + \ 1 p(p) + P p(p)B(p ) c T ( P ) 

* = B T (p)P(p) - 7 / DUp) 

C(p) D u (p ) -7 / 

Using Eqs. (30)-(32) and (2), the LMI condition of Eq.(15) is equal to 

I 1 + R t K t Q + Q t KR < 0. 


(30) 

(31) 

(32) 


(33) 


Using Lemma 1, the LMI condition of Eq. (33) is decomposed into the following two LMI 
conditions: 


•A/^A f R < 0, 
A JqW q < 0. 

The positive matrix P is parameterized as follows: 


(34) 

(35) 


Pifi) 


X(p) N(p ) 
N T (p) X Yp)_ ' 


Y(p) M(p ) 

M T (p) Y l (p)_ 


(36) 


From Eqs.(30)-(32) and (36), it is proved that the LMI condition of Eq.(34) is equal to 
Eq.(23). 


Eq.(31) is rewritten as 


Q=[B T (p) 0 D T l2 (p)]S(p) 


where 


S{p) := 


P{p) 0 0 
0 JO 
0 0 1 


Using Eq.(37), the nullspace Mq is rewritten as 


a r Q = s- 1 M{[B T {p) 0 dUp)\- 


(37) 


(38) 


(39) 


After some algebraic manipulation with Eqs.(30)-(32) and (39), the LMI condition of Eq.(35) 
is equal to Eq.(24). LIsing the above method, it is proved that the LMI in Eq.(16) is converted 
into the two LMI conditions of Eqs. (25) and (26). □ 
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The control synthesis problem can be solved using the LMI Toolbox [6] such that 


min 7. (40) 

X(p), Y{p) 

In order to solve the optimization problem, the basis functions of X(p) and Y(p) are required. 

n B n a 

x( P )-.= YlfM x i, y( p )-Y.sM y < ( 41 > 

i=l i = 1 

where functions fi(p) : TZ Hs — > ► 7 Z and (]i{p) : 7 Z Us — > 77 are bounded and the unknown 
matrices X t and Y % are symmetric, respectively. Note that it is still unknown how to choose 
optimal basis functions for predicted performance level of the closed-loop system. Under 
the assumption that D\ 2 and D 2 \ are full-column and full-row rank for the entire parameter 
space, respectively, the controller is constructed from the solutions X(p) and Y(p) in Eq.(40) 
as follows: [1] 

Dk 
Bk 

C k 

Ak 

where 


B k = -C^(D 2l G 1 Dl)~ 1 + (XB 1 + -CfD u )(D^D 2l )- 1 Dl (45) 

7 7 

C k = --{D T l2 G 2 D 12 )~ l B^ - - -D U B^) (46) 

7 7 

~ D h B l ( 47 ) 

n 7 1 \ [CiY + D 12 C k _ 

G\ = (7 2 1 - D^D U )~\ G 2 = (7 2 1 - (48) 

Note that the matrices in Eqs.(42)-(48) are functions of the scheduling parameters. To 
complete the control construction, the following factorization is used 

N(p) = X(p), M(p) = X(p)~‘ - Y(p) (49) 

to satisfy the equality condition: 

I-X(p)Y(p)=N(p)M t (p). (50) 



— Wfc 


0 

N- x B k 

CkM~ T 


= N-^XY + NM 1 + A k - XAY - B k C 2 Y - XB 2 C k }M 


-T 


(42) 

(43) 

(44) 


4 EXAMPLE 

In this section, it is demonstrated how to synthesize a gain-scheduled FTC law for the 
airplane of FASER shown in Fig. 1, by using the method described in the previous section. 
Two gain-scheduled LPV FTC laws are designed by the conventional LPV synthesis and the 
suggested method, respectively. For comparison, the designed control laws will be simulated 
under false identification. 



4.1 Mathematical Model of FASER 


4.1.1 Description of FASER 

FASER (Free-flying Airplane for Sub-scale Experimental Research) shown in Fig. 1 has been 
developed at the NASA Langley Research Center, which has a conventional high wing with 
tail configuration with 7 ft wingspan and a propeller driven by an electric motor [11], The 
detailed shape and physical quantities are taken from Refs. [10, 11]. The control surfaces of 
the airplane are an elevator, ailerons, flaps and a rudder driven by JRDS8611 Digital servos. 
For an INS system of the airplane, the MIDG GPS/INS unit built by Microbotics[9] is used. 
The positions are calculated based on GPS signals received by the MIDG. To measure angle 
of attack and side-slip angles, small props with small potentiometers are attached at both 
tips of the main wing. The roll, pitch and yaw angle rates are also measured by the MIDG. 
The on-board flight computer of FASER is the PC104 with 133MHz CPU, the 10 channel 
PWM board (Quartz-MM Diamond system) and the 16 channel analog I/O board (DM6420 
Real-Time Devices). 


4.1.2 Nonlinear Equations of Longitudinal Motion 


The longitudinal dynamics have four states: velocity (V) in ft/s, angle of attack (a) in 
radians, pitch rate ( q ) in rad/ s, and pitch angle ( 6 ) in radians, and inputs: elevator deflection 
(<5 e ) in radians and thrust (T) in lbs. The airplane (FASER) has the right/left ailerons 
(d r a/Sia) and the right/left flaps ( 8 r f/Sif ) to be operated independently. The longitudinal 
equations of the motion are written as: 


V = — {( qSCx + T) cos ol + qSCz sin a} + g{— sin 6 cos a + cos 9 sin a), 


m 


qSC z cos a qSC x + T g . . 

a =q - 1 — — b — (cos ol cos u + snUsma , 

mV mV V 


q = —qScC m , 


J, 


yy 


6 = q, 


where aerodynamics coefficients C'x, Cz, and C m are written as 

Cx =C x „(a) + Cx„(a)f/ + Cx Se (a)8 e + C x Sa {a)6 aall + Cx 6j {o.)5f aln 
Cz =CzJa) + C z ,(a)ff + Czja){ e + C z ,Ja )^„ + Cz tJ (a)5 Ull , 
Cm —Cm„ (a) + (°) /f + C m ^ (a)<5 e + C mia + C m „ f [<x)6 


(51) 

(52) 

(53) 

(54) 


Note that the positive deflection of both right and left aileron control surfaces is defined 
in the same way of the conventional definition of the positive elevator deflection. In the 
longitudinal motion, assume that the left and right aileron surfaces can symmetrically move 
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to change the lift and drag forces. Thus, the control inputs of the airplane in the longitudinal 
motion are thrust T(lb), elevator deflection 5 e (deg), aileron deflection 5 aall = 0.5(<5 m + 5i a ), 
and flap deflection Sf all = 0.5 (5 r f + Sif). The detailed aerodynamic coefficients are calculated 
by using a CFD code in Refs. [4, 12]. 


4.1.3 Quasi-LPV Model of Longitudinal Motion 

It is required to represent the nonlinear dynamics as a quasi-LPV model in order to design 
an LPV control law using the method described in Section 3. Using the quasi-LPV represen- 
tation method in Ref. [14] , the nonlinear equation of longitudinal motion can be represented 
as the quasi-LPV model: 

x = A(V, a)x + B(V, a)u (55) 

where x — [V a q 9] T and u — [T 5 e 5 aall ] T ■ The detailed matrices A and B can be found 
in Refs. [14, 12]. Note that the flaps are not included in the quasi-LPV model on purpose 
since the wake generated by flap movement may be able to coupled with elevator deflection 
movement. The coupling effect may generate mathematically unpredictable aerodynamic 
force and moment on the airplane. Hereafter, control variables are set as thrust T, elevator 
deflection S e and same directional aileron deflection S aall . 

The flight envelope is defined as follows: 

60ft /sec < V < 

2° < a < 

based on the trim region (the line of the plot shown in Fig.2) for a constant level flight 
condition (x — 0, a = 6). Note that the states V and a are also considered as scheduling 
parameters p p which represent flight conditions. The control action limits under the nominal 
condition are as follows: 

0 < T < 6 lb, -20° < S e < 20°, -20° < S a<M < 20°. (57) 




120ft/sec 

7° 


(56) 


4.1.4 Elevator Fault Model and Parameter Space 


In this example, elevator failure is considered as loss of elevator controllability. Assume that 
the elevator is fixed at trim position for a failure case. Floating control surfaces, partially 
damaged control surfaces and control surfaces fixed at any other positions can be considered 
as failures and can be modeled. However, those failures are not considered here for simplicity. 
In this paper, the fault is simply modeled as linear change of the matrix B(p) such as 


B(p)u 


B(p P 


0 

Tl 

0 


u 


r 2 


(58) 
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where the failure parameters T\ and T 2 can vary from 0 (failure condition) to 1 (healthy 
condition). 

Consider that one of two actuators can be failed at a time in order to prevent zero con- 
trollability of the system. In order to represent the failure condition, the fault parameter pj 
is defined as follows: 


Pf(t) 


Ti(t) if 0 < Ti(t) <1, r 2 = 1, 

2 - r 2 (f) if Ti = 1, 0 < r 2 < 1. 


(59) 


The estimated fault parameter can be calculated from the estimations of the failure param- 
eters T\ and r 2 . 

The false identification case is considered as the estimated fault parameter indicates the 
aileron failure for the elevator failure for a short time interval. In the time interval, aileron 
actuator is actually healthy but an FDI module indicates it as a faulty one. Also, the eleva- 
tor actuator is failed but a FDI indicates it as a healthy one. In that case, estimated fault 
parameter p/ is equal to 2 (aileron failure) instead of 0 (elevator failure). 

The entire parameter space V and subspaces shown in Fig. 3 are defined as 


V = Vi U V-2 

where 

Pi '■= {p I Pp e Fp-, Pf e £(P/>0-l)>P/ e [0 2]} 

P 2 ■= {p | Pf — 0, p/ e [1.9 2]}. 

Here, the set 5(p/,0.1) is defined as 

5 (P/,0-l) := {pfit) | \\p f (t) -p f (t )\\ < 0.1}. 

The set T v is defined as the flight envelope in Eq.(56). Note that the fault parameter p/ 
can vary abruptly from 1 (healthy condition) to 0 (faulty condition) but the estimated fault 
parameter can smoothly vary from 1 to 0, based on the FDI module algorithm. Generally, 
the LPV-FTC law is designed for the subspace V\ in Refs. [16, 7] under the assumption that 
the FDI can estimate the fault parameter fast and accurately. In this paper, we consider 
cases where the closed-loop system stays in the parameter subspace P 2 for a short time 
interval. 


(60) 

(61) 

(62) 


4.2 Control Synthesis Framework 

The control design objectives are to track the pitch angle command with less than 4% track- 
ing error under a nominal condition and to reduce tracking error under a faulty condition. 
In the control design procedure, the variations of the predicted closed-loop dynamics due 
to false identification are also considered by including LMI conditions of Eqs. (25) and (26) 
with the pre-dehned parameter n. Recall that the parameter k represents possible instability 
of the closed-loop system under false identification [13]. 

The control design problem is formulated as a model matching problem shown in Fig.4. 
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In the block diagram shown in Fig.4, the block “Act” implies the actuator models. In this 
example, the mathematical models of the JRDS8611 servo motor and the electric motor 
are approximated as the first order filters and Ap_, respectively. The first order model 
of the servo motor is approximated with constant one in the control design procedure to 
reduce the order of the designed control law. The first order model is, however, used for 
simulations of the closed-loop system. The block W nmse represents sensor noise such as 
<Aag([0.1ft/sec, 1° 1° ,1 ]). The performance weighting function W p is set as ^ 0 2 ^ +1 to 
represent 4% error allowance in a low frequency domain and the ideal transfer function T t is 
set as s / 0 1 9+1 for ideal pitch angle responses. The block W act is set as diag([l/10, 1/40 1/40]) 
to constrain control action. Using the block diagram shown in Fig.4, the augmented open- 
loop is constructed with a linearized model around a trim point (V t , a) = (70, 5.4°). 

For simplicity in designing an FTC law under the false identification, the scheduling pa- 
rameter is defined as the fault parameter pf e [0,2] at the given trim point. The basis 
function fi(p) of X in Eq. (41) is defined as 

h(Pf) = 1, h{pf) = Pf , h(pf) = l/pf, (63) 

and the basis function gi{p) of Y is set as same as fi(p). The LMI constraints of Eqs. (23)- 
(26) are evaluated at each grid point in the set [0.01, 0.2 0.4 • • • 1.8 2] of pf. Note that 
the grid point of 0.01 that represents a faulty condition is chosen in order to avoid singularity 
of 1/ Pf when the basis functions are evaluated at every grid point. For evaluating the time 
derivatives of X and Y, the parameter rate bound is defined as 1 sec -1 . 

To solve the LMI optimization in Eqs.(23)-(26), the scalar parameters Ai and k are pre- 
defined as 0.01 and 0.1, respectively. To calculate the best values of Ai and k, it is required 
to solve another optimization by minimizing M 1 of Eq. (18). In this paper, we choose them 
based on a few iterations of different values of Xi and k. For example, when Ai is 0.2, there 
is no feasible solution for the LMI optimization in Eqs. (23)-(26). Thus, Ai value should be 
smaller than 0.2. When k is set as large number, it implies that the closed-loop system can 
be unstable with very fast rate. It also implies that the upper bound of the induced-/^ norm 
of Eq. (18) could be large. Thus, the parameter k can not be set as large number. When 
the parameter is set as small number close to zero, it implies that stability of the closed- 
loop system is required under the false identification with expense of over all performance 
degradation. 

In this paper, two LPV FTC controllers K\ and AA are designed by the conventional LPV 
method and the method suggested in Section 3, respectively. The conventional LPV method 
can be re-constructed from Eqs. (23) and (24) by setting Ai as zero. The designed two LPV 
controllers are simulated in the next section. 

4.3 Simulation Results 

For all simulations, pitch angle commands are set as a square signal such as 1 degree up at 
5 second and 1 degree down at 20 second. The label “Ti” in Figs. 5-9 denotes the ideal 
pitch angle time responses. The label 5 e and 5 ec denote elevator deflection angle and elevator 
deflection angle command, respectively. For all simulations, state’s initial values are set as 
the trim values. The simulation results under a healthy condition are shown in Fig. 5. Note 
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that the controllers K\ and K 2 achieve the desired performance objective that pitch angle 
command tracking is less than 4% at low frequency. 

For an elevator failure case, the closed-loop time responses are shown in Fig. 6. In the 
simulation, it is assumed that elevator fails after 5 second and an FDI module detects the 
fault immediately. The pitch angle time responses with the controllers are very similar to 
each other and imply that the two controllers achieve the performance objective while the 
elevator fails. The two controllers generates aileron deflection angle commands to compensate 
the elevator failure. 

Three false identification cases are simulated. 1) While the elevator fails after 5 second, 
an FDI detects the aileron failure between 5 and 10 seconds and the elevator failure after 
10 second. 2) While the two actuators are healthy, an FDI detects elevator failure between 
5 and 10 second. 3) While the two actuators are healthy, an FDI detects aileron failure 
between 5 and 10 second. The simulation results for the case 1 are shown in Fig. 7. Note 
that estimated fault parameter responses are generally simulated by an FDI module with 
the closed-loop system but in this paper, they are pre-defined in order to represent false 
identification. It is observed from Fig. 7 that the controller K 2 can reduce the performance 
degradation due to the false identification, but the controller K\ can not. The controller K\ 
generates elevator command signals due to the estimated fault parameter which indicates 
an aileron fault between 5 sec and 10 sec. The generated elevator command signals can not 
operate the elevator actuator since the elevator is actually failed after 5 second. Again, in the 
design process for the controller Ad, there is assumption that the estimated fault parameter 
is equal to the true fault parameter. In the false identification, the assumption is violated. 
Meanwhile, in the controller K 2 design process, the possible false identification is considered. 
That leads to the reduction of performance degradation due to false identification. When 
the pre-defined parameters Ai and n are different values, the time responses of the closed- 
loop system would be different. It would be of interest to further investigate the sensitivity 
the closed-loop performance and actuator responses to Ai and n for a false identification 
case. For the false identification cases 2 and 3, the closed-loop time responses are shown 
in Figs. 8 and 9, respectively. Note that the two controllers A\ and K 2 can achieve the 
performance objective. Since the two actuators are healthy, one of compensated actuator 
command signals can operate healthy actuators, respectively. The second and third false 
identifications do not affect pitch angle tracking of the system, respectively. 

5 CONCLUSION 

In this paper, an active fault tolerant control synthesis method is developed under false 
identification. In the control synthesis method, possible closed-loop dynamic variations due 
to false identification are considered. In the control synthesis, the closed-loop system under 
false identification can be unstable for a brief time interval with trade-off of performance 
degradation. The performance level of the closed-loop system is described as a function of 
duration time of the parameter subspace, the induced-/^ norm index 7 and exponential decay 
rate in each parameter subspace. With given possible exponential decay rate of the predicted 
closed-loop system, the control synthesis problem is formulated into the LMI optimization 
to minimize the upper bound of the induced-/^ norm. The suggested LPV-FTC synthesis 
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method is applied to design an FTC law for the longitudinal motion of the airplane FASER. 
According to simulation results, the designed control law is insensitive for false identification 
while it achieve pitch angle tracking error less than 4% in a faulty condition. 
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Figure 1: The FASER 
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Flight Envelope 



Figure 2: Flight envelop with trim points 
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Figure 4: Model matching synthesis block diagram. 
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Figure 7: Time responses of the closed-loop system under the false identification case 1. 


19 



Time(sec) 


2 
1.5 
Q. 1 
0.5 
0 

0 10 20 30 

Time(sec) 


i i fault parm 

i i estimated parm 



-4 ■ ■ 

0 10 20 30 

Time(sec) 



Time(sec) 



Time(sec) 


Figure 8: Time responses of the closed-loop system under the false identification 
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